{"report_id":"3fb00fca-2241-4726-b314-a7d96f8fe197","version":6,"status":"done","tags":[],"date":"2025-12-06T18:46:11Z","url":{"schema":"http","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":0,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"title":"Türk ifşa Arşivi vip – En iyi Türk ifşa videoları","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":0,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T18:46:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"c0.wp.com","ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":63915,"first_seen":"2018-09-24T15:59:05Z","last_seen":"2025-12-01T01:01:39.036336Z","alert_count":0,"request_count":5,"received_data":235585,"sent_data":2340,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"turkifsaarsivivip.xyz","ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"domain_registered":"2023-09-27","domain_rank":2571702,"first_seen":"2023-09-28T00:15:14Z","last_seen":"2023-09-28T00:15:28Z","alert_count":13,"request_count":13,"received_data":443838,"sent_data":6639,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.167.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-12-01T15:17:06.351144Z","alert_count":1,"request_count":1,"received_data":1671,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":4994,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2025-11-30T22:42:42.955265Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2025-11-30T22:41:10.508648Z","alert_count":0,"request_count":1,"received_data":4265,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":4,"received_data":72760,"sent_data":2274,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-30T22:16:05.472311Z","alert_count":0,"request_count":1,"received_data":376930,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-12-01T19:36:16.074751Z","alert_count":2,"request_count":2,"received_data":230061,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-12-03T18:54:22.605997Z","alert_count":5,"request_count":1,"received_data":526,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/js/navigation.min.js?ver=20120206","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29c6469bde88da2ce179c32f8d147242","sha1":"e92a795a7611e80d781f57cf2b3a7afea0452e2e","sha256":"fe31aca33128221bbbdac3a13c4a3aa2532cd1986b01012772f14f6883849061","sha512":"181184ec2f2169c275e0a64c55326b76a603208debdf8907c67e3f6ea6002e0900dadcb4ebe5c4e624c38440d554911090352690b73489c4229630f688a23fde","ssdeep":"","tlshash":"0621bc5e2c8427372acf25d572ef584034322095fe894812a4b0eb423978ae1197e6d8","size":1433,"data":"","first_seen":"2023-03-07T17:59:38Z","last_seen":"2026-06-01T00:26:42.078212Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c68c4df95489481807773725905d739","sha1":"f15d3b26762ddf29ded9f276a44206bb880222d5","sha256":"c6d873e163d6560be9df87f179adfbb7b8476d394c20bb3032159efc4687a897","sha512":"ccf8262c25bbf1f8062a28c570aa633adca49f0268c3aa5241e4cb7129695b129b64a5e95fb6add05b86351e688ee34e35a64f1f4978c2e86a879aad1482ebf0","ssdeep":"","tlshash":"4e90026a12b580691663260c591d8d68506d1043c81c65d63b9c41a59b340a41116904","size":55,"data":"","first_seen":"2025-12-06T18:46:16.344732Z","last_seen":"2026-03-17T03:33:10.652135Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa5d0da5353a9c34f8f2d369813ce158","sha1":"3361bd95bda2844c10f2a6cb78ee7c46bc3b93ca","sha256":"f602eb38af1baccdb9f7c5afacaf6acb5f8093b5156f0eb89b36ed3844fa6278","sha512":"639c76ed798ff53665274326f941c365f0fe74115874ca067a603e41e2d51cb8e3672baeb93c1457f08ed82768d2f4fc6f1affb7b93e6d043a096b5cb6b524b3","ssdeep":"","tlshash":"f361bade3779388b32b605d16a2f0e07fb7658361a88d434cab9e7141cb1463d37ad4a","size":3392,"data":"","first_seen":"2025-12-06T18:46:16.346273Z","last_seen":"2025-12-06T18:46:16.346273Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec446a6dac991633e878b1b8f64439e","sha1":"b67f76350438317b092844abb4bffa55ee5ee0f3","sha256":"10cc4a533c50a09e532fe11832ca3179f1940cb0d3055dd2fc29db8248fdd3b7","sha512":"33912a0fe548cec284af07c801eee31aaea88f5e2c118d69d1eea42def195fed46aee108253f651f47f37eeed97e35b22fe71e3218bc97b6e03d0a4fa43c4206","ssdeep":"768:h5DJGUv8El0qcctXS/OQjiS5AQ0kZG9y9Gsc6rxHzJXaFiHQotjp/8z4Do89WM41:bRXadiS5zZG9y9GFYxd5vkvcA","tlshash":"eb4376683dc01e8733458eeb7f23b5d1d554697e6585848ebe086c9432836b3faf8232","size":57668,"data":"","first_seen":"2025-12-02T17:30:16.50625Z","last_seen":"2025-12-09T09:59:34.360287Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202549.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","size":3812,"data":"","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-06-03T16:57:04.422047Z","times_seen":62766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T16:55:47.31498Z","times_seen":815002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"130829c60f5f949c807f33ee8b65f9c1","sha1":"b98f22cabe5729844761f202c5da916fe83da6e7","sha256":"d45a418fb9873e07aac80825ac3c2d8905c96251fb8e9b2b96be45c2d1adfde7","sha512":"6a9de92bac3bf69344ad5b92d636e6e2221ecf0d260f3028f147871d86f8c77f253054dc4f7ad48b4ca3f3b0dc20986eaab873e447e6412f25278a79982b8e33","ssdeep":"","tlshash":"8ed097a81247ac3901ff16403b877b40310333260222ac308cea114a053e9071666c88","size":244,"data":"","first_seen":"2025-12-06T18:46:16.347828Z","last_seen":"2025-12-06T18:46:16.347828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/plugins/wordpress-popular-posts/assets/js/wpp.js?ver=7.3.1","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeffb498ee34c2b97693dd833d3ee837","sha1":"150958c84335d17d6376a12897ff9007d6fdb1bc","sha256":"1f084d11ba75148167fa296656c5e0aa2452f88a3271bbba832c5fd428e9728e","sha512":"90e3eb39aba718f53d39eb39c651429d5db2a553bff1cbe83b0d4cde26d021e51f1e9fbce5b14f197c924db832881e28f58d03d7aea8dc72a35b8812164b0065","ssdeep":"48:8NVeecZnMqIEiVAurI9pYKob+kVAIAZASjwykXyPp8PzFAYKgKyS/Q5F9JsJn/lA:9MWiWpYKob+kVsl+5eySSeCLv","tlshash":"37b1628d0923452285f3b3eb993a8658f7229137714056527e3c9b552fb3e90c4b2fce","size":5508,"data":"","first_seen":"2025-04-16T04:10:48.144213Z","last_seen":"2026-06-03T13:24:10.664986Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/js/jquery.nucleare.min.js?ver=2.0.6","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"decbf5d7587ca9bde16edc986ce8460f","sha1":"aeec1626a3b9a7bcae6f63caf62b3a05e12d92d8","sha256":"2405f8e93f2cbe64d735b6f41e1cf4f6c16d986f4ea7f6e927fc14dd38f0261c","sha512":"436bf9fdee072b3b50a552c2f0101e069d7ec56495b055950eac2bbdbeec328174b3a122ffa81ee7dd1b23e236fe7c068eebe96f34d872668ad822903e9c13c2","ssdeep":"","tlshash":"ce41d58d9957a3b71cbf26765a7bf05c33b3092e874653e1a0d4ca701d17e441363e98","size":2213,"data":"","first_seen":"2025-06-28T03:43:17.166626Z","last_seen":"2026-06-01T00:26:42.149282Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T16:55:47.362551Z","times_seen":883649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-03T16:43:42.350859Z","times_seen":207459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfe488ccf120d34ff89cfd2564e5b5b","sha1":"171610e37c558b29e5a22b392d2fab621be41132","sha256":"94d91b437366ae6ba97ee86005c231d1e012d6fc6a4f6befa3a79303fa3cc3c2","sha512":"8970ae305bfa2dbe0862d51d9d9903cce60841387b9dfdcd2542be436ac55b06dd592ccc05040f6029759f9a4d40ba1483e56d3b9d8588e355a2a8d3ef0c7729","ssdeep":"3072:o7Wb2vZvZffYvS9l9oxXQI5rfjZVNmL9ZPe2L:o6b27YvS9l9QjZVsL9V","tlshash":"dcf3714536c4a947734a4bbb372bb4e4f546281e7888099ff2487c64b19667bfef0132","size":170643,"data":"","first_seen":"2025-12-02T13:47:40.970912Z","last_seen":"2025-12-09T09:59:34.26647Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ebc747a5afd8e5e44bad293cca37250","sha1":"c336e4d3b7356c6f7cbb000aa904e48a3daabab1","sha256":"386cf82d36009187e55c1d6acf2944991189c01ca7edd8a4c1371d4f54f9d512","sha512":"d0fec6b4101a9573b17104c5553647b084d74865521e944f871042def1b7a9ca46c60ac7c6c8b66924256e09ce0d90213683050fb74e9ea277b5d17e8606b664","ssdeep":"","tlshash":"7ad0a77203acd87df1b81f1c30384c1051c4102341299d145715e8686d3d4761893901","size":236,"data":"","first_seen":"2025-12-06T18:46:16.349375Z","last_seen":"2025-12-06T18:46:16.349375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a48f9694fd9914eacfc732aa4fc44402","sha1":"e2376098ea31e50d7fbd30ca77830a3023b8f7a5","sha256":"1505b746a19f7dccf9b761d48b2ece763229b8892831ba1c41f5b8b6fb4bb775","sha512":"1f4a385a8b8cab97dd91ce7852633b11289599cb80d1f70661c4e60eb92424f5e813e89cc61dd0c1d5c5cdaf8e3ffc4f971c2bb200c087890fc9b75987998084","ssdeep":"1536:1qBu6DD4UaD2L694onHfEwn6bDBffA6cuK/nqippdGn4XZfO0UVsC6pF34LWZtF1:cDD44OqCf2ifqippxZfrXF3ft72297C+","tlshash":"14833bd1bf3069361ebb41b1b06f018bb6f5d9375a8d4061e508c8a92f68c9710f7f6a","size":85120,"data":"","first_seen":"2025-01-24T15:22:42.670202Z","last_seen":"2026-06-03T06:19:00.980762Z","times_seen":4451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-MJWCKFL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b070798b59f94e0b16f9f76a9f23383f","sha1":"2c53a2806fd4fd17d08b1bf5037bb3991211cf1d","sha256":"43b653ff8a0a8e87dd4b4436e975599eb5d3192c2eb9006491b1075a033c9720","sha512":"ef6ca598c454febc3d88071821ca55309df16bad0c637d2513ce4d98f34c2d5848f894bbf4633dd93d53c3bff37ce67ac1563f4399872c37ba0e13e08d4e422f","ssdeep":"6144:+W7WIKw+WSayqmVDD5U6k/bbqt3L3cYotvxnh12cbP:TPKmSwmVDR3cZx3","tlshash":"678419ce73d670265392b478503f008ba57b69a2f44cc895f18acde52e74a9a4277f3c","size":376326,"data":"","first_seen":"2025-12-06T18:46:16.311505Z","last_seen":"2025-12-06T18:46:16.311505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/css/dist/block-library/style.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /c/6.8.3/wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 08 Jul 2025 13:02:48 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 06 Dec 2026 18:45:49 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-06-03T16:43:42.337894Z","times_seen":173735,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":30,"dns":1,"connect":7,"send":0,"wait":10,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/css/font-awesome.min.css?ver=4.7.0","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/themes/nucleare/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:43:09 GMT\r\netag: \"791c-62e6e2c9249a5-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7057\r\ncontent-type: text/css\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":31004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837), with CRLF line terminators","md5":"a0e784c4ca94c271b0338dfb02055be6","sha1":"88af80502c44cd52ca81ffe7dc7276b7eccb06cf","sha256":"820e169ce24824066d9973fd4b6561aae9dcd6dbef6435da905d5a1d6482997c","sha512":"97149632c15eb33690273abfa78636ad0471999363e11bf59ca61a4de32444e6f299db3b80d52b2e9437c645ec235fa8d3b8c20dcc350dbb9e175f12b3849a64","ssdeep":"384:/Hu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:/wlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"3dd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T11:31:05Z","last_seen":"2026-06-03T17:18:38.863711Z","times_seen":17479,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/js/jquery.nucleare.min.js?ver=2.0.6","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/themes/nucleare/js/jquery.nucleare.min.js?ver=2.0.6 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:43:20 GMT\r\netag: \"8a5-62e6e2d3a81c6-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 700\r\ncontent-type: text/javascript\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2213,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2213), with no line terminators","md5":"decbf5d7587ca9bde16edc986ce8460f","sha1":"aeec1626a3b9a7bcae6f63caf62b3a05e12d92d8","sha256":"2405f8e93f2cbe64d735b6f41e1cf4f6c16d986f4ea7f6e927fc14dd38f0261c","sha512":"436bf9fdee072b3b50a552c2f0101e069d7ec56495b055950eac2bbdbeec328174b3a122ffa81ee7dd1b23e236fe7c068eebe96f34d872668ad822903e9c13c2","ssdeep":"","tlshash":"ce41d58d9957a3b71cbf26765a7bf05c33b3092e874653e1a0d4ca701d17e441363e98","first_seen":"2025-06-28T03:43:17.166626Z","last_seen":"2026-06-01T00:26:42.149282Z","times_seen":15,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivonarrow/v35/tss0ApVBdCYD5Q7hcxTE1ArZ0bbwiXw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/archivonarrow/v35/tss0ApVBdCYD5Q7hcxTE1ArZ0bbwiXw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18692\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 12:47:27 GMT\r\nexpires: Fri, 04 Dec 2026 12:47:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194302\r\nlast-modified: Wed, 10 Sep 2025 16:48:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18692, version 1.0","md5":"4e8b61d5d8cea9e06f565e8846a9ce40","sha1":"7364ccc2d4026d92507d2bd95631eb22df908ac9","sha256":"e1097881272dd16039ffb9f8b5108332926750842d1fea1dd059d5396bb83ef2","sha512":"c09a362c568df9a4577124f3852482ccfa615a8f22d6f20b99cd5eec1dc5eb6c3ffeff7c57b28e9d939df6feefceca17f7f56f4514c1667ab151c58c01b86793","ssdeep":"384:XF30ZIhUaaHnVJixV5I+/fIsFAEpoK82Saey3CH54UF:VsIhTLCEIsFAEeaeUCHKUF","tlshash":"c782e0153605df88d34e5c33a04abf834742e3eb611eb12f8684053692e85979eafd3d","first_seen":"2025-06-07T00:08:45.448155Z","last_seen":"2026-06-03T12:20:42.66951Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":120,"dns":1,"connect":20,"send":0,"wait":9,"receive":2,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/uploads/2023/09/cropped-IMG_20230928_011830_362-32x32.jpg","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/cropped-IMG_20230928_011830_362-32x32.jpg HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:44:44 GMT\r\netag: \"54c-62e6e32451540\"\r\naccept-ranges: bytes\r\ncontent-length: 1356\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3","md5":"9b608515cd54b379b036606b25cdcbdc","sha1":"4ae9226320e68df55b40298572540f9abc43cd70","sha256":"2409ad8a80b40ead9606136cf6d94c4a8c6dde94386e7e94b02de17f9c34e6fe","sha512":"a63d402a56a8907a9c8c5b51498a6d2c83adab6fadb52c496f8b5f8deeca3d398d5004f9b0056ea2d64cbdc7f81170f8d231136ce6b1d47b93c6c6c1a5c97c70","ssdeep":"","tlshash":"4321429973908bcee4192f7c04d45f89f7957b23ae89ba638270c11067289e40cac543","first_seen":"2025-12-06T18:46:16.30952Z","last_seen":"2026-03-17T03:33:10.634784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-MJWCKFL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=GT-MJWCKFL HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nexpires: Sat, 06 Dec 2025 18:45:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130106\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376326,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b070798b59f94e0b16f9f76a9f23383f","sha1":"2c53a2806fd4fd17d08b1bf5037bb3991211cf1d","sha256":"43b653ff8a0a8e87dd4b4436e975599eb5d3192c2eb9006491b1075a033c9720","sha512":"ef6ca598c454febc3d88071821ca55309df16bad0c637d2513ce4d98f34c2d5848f894bbf4633dd93d53c3bff37ce67ac1563f4399872c37ba0e13e08d4e422f","ssdeep":"6144:+W7WIKw+WSayqmVDD5U6k/bbqt3L3cYotvxnh12cbP:TPKmSwmVDR3cZx3","tlshash":"678419ce73d670265392b478503f008ba57b69a2f44cc895f18acde52e74a9a4277f3c","first_seen":"2025-12-06T18:46:16.311505Z","last_seen":"2025-12-06T18:46:16.311505Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":7,"connect":26,"send":0,"wait":45,"receive":60,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY_Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY_Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 02:56:54 GMT\r\nexpires: Fri, 04 Dec 2026 02:56:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229735\r\nlast-modified: Wed, 10 Sep 2025 16:50:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12336, version 1.0","md5":"cac109a776f031fe19ca83b6488033eb","sha1":"5a2af4c32a5224db8cac5df435900a165bf15abc","sha256":"b13dce34203d893eb00980383bc5abf8b75c9eb1f59c3a630e9fc8baf2e9984f","sha512":"41f2b8dac17e9675dd00525979e819573ad05f1c550db36e2c78d1f0cffc7a6fa445445dac15c871aa973a80dfb662b4dbef52dcc202a1fcc3cf133fa39e1595","ssdeep":"384:TiNz5nxp3bDzvKw/n7iZtdcQnJrL4hUmE1SXVXfZGMIYe:ujvv/7idcUoUmpXfdIR","tlshash":"f642c0c032db91cec7ea0f5c1040b7da577da93b2ac905eaa8b84013fe69176af36045","first_seen":"2025-09-14T02:46:53.627251Z","last_seen":"2026-06-03T06:45:27.91275Z","times_seen":195,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":125,"dns":1,"connect":22,"send":0,"wait":8,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/uploads/2023/09/cropped-IMG_20230928_011830_362-192x192.jpg","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/cropped-IMG_20230928_011830_362-192x192.jpg HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:44:44 GMT\r\netag: \"2c7e-62e6e323ac486\"\r\naccept-ranges: bytes\r\ncontent-length: 11390\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 192x192, components 3","md5":"7852ea7d2a5cd40da32d3f7d67180c60","sha1":"940ed3ee15727e9202aae2e0c2ad74ed20521e63","sha256":"47697b71aac58522429da7408eeec141be50c5b4a499f0784b2efb78dd054d25","sha512":"368500678293c452f8cd55cc3b8298f40208efbcf7f163646f479c09e21f4bfe65c7f14f01769b3fed85418957f01a6ddbd0581f66da0dbd8c9ae479f9383b69","ssdeep":"192:kjCHxxr3c/0RuZMU/9SAOwgjAJgWlrEq++fv8EWP5MnUWUi4sfk2OJ/3tles+:kmxxrU8uZZ/9zOPjAJxrEq0P2zk2geN","tlshash":"c832a08d171b1664cac74e32db684a49fbdf2f72c79e0c268138e1232175add55019af","first_seen":"2025-12-06T18:46:16.31474Z","last_seen":"2026-03-17T03:33:10.639327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 15 Jul 2025 21:32:39 GMT\r\netag: \"4b33-639fe83fd9899-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5233\r\ncontent-type: text/javascript\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-03T16:43:42.350859Z","times_seen":207459,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AOCedOEdX0E_eCjO7hucq2_359mhmDmYScD3Y8dI44u1wf2VMZky3YhbchI7DQxMLE6friwjb6zJLnY\r\nx-goog-generation: 1764673471486233\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 170643\r\nx-goog-hash: crc32c=CiP5Gg==, md5=2/5IjM8SDTT/ic/SVk5bWw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sat, 06 Dec 2025 19:45:49 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 02 Dec 2025 11:04:31 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\nage: 2078\r\ncf-cache-status: HIT\r\netag: W/\"dbfe488ccf120d34ff89cfd2564e5b5b\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a9df146eac556ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dbfe488ccf120d34ff89cfd2564e5b5b","sha1":"171610e37c558b29e5a22b392d2fab621be41132","sha256":"94d91b437366ae6ba97ee86005c231d1e012d6fc6a4f6befa3a79303fa3cc3c2","sha512":"8970ae305bfa2dbe0862d51d9d9903cce60841387b9dfdcd2542be436ac55b06dd592ccc05040f6029759f9a4d40ba1483e56d3b9d8588e355a2a8d3ef0c7729","ssdeep":"3072:o7Wb2vZvZffYvS9l9oxXQI5rfjZVNmL9ZPe2L:o6b27YvS9l9QjZVsL9V","tlshash":"dcf3714536c4a947734a4bbb372bb4e4f546281e7888099ff2487c64b19667bfef0132","first_seen":"2025-12-02T13:47:40.970912Z","last_seen":"2025-12-09T09:59:34.26647Z","times_seen":110,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":101,"dns":36,"connect":5,"send":0,"wait":18,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/style.css?ver=2.0.6","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/themes/nucleare/style.css?ver=2.0.6 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:30:09 GMT\r\netag: \"9eaa-62e6dfe11b979-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8701\r\ncontent-type: text/css\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40618,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"04a27c057e22e10ede58c0ae72403cbe","sha1":"af34549d981d062ddd71594c7ece4bdfd5aeddd5","sha256":"5f4094a787e3aff6013de6b1d25b92d6123ade8f1c8d9d71fc7a94bf84e76dc4","sha512":"e0758d999e44f511a586a3ab1f2ced92d19227a41c3df97a9f958060ff856da7f249754bd446fc0b4d31f4ff61a8065cb38eb2faf7f3c26a12186d0558610937","ssdeep":"768:dwZsroyqcSqK4Vwj4D3Kl8ymnDFVpCE/GJQDekbmSWljlFDWnNN7ZdEYbPJ3WOWB:dwsSqKWXDU1AN7bEYbB3WOWPoquPXw","tlshash":"780397756f4429445237c2aeffd5ab10cb2d4066ef0f1ddea046a63c8b865a501bfb8c","first_seen":"2025-12-06T18:46:16.31863Z","last_seen":"2026-03-17T03:33:10.638254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=9791066\u0026cbur=0.6372627543420147\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=T%C3%BCrk%20if%C5%9Fa%20Ar%C5%9Fivi%20vip%20%E2%80%93%20En%20iyi%20T%C3%BCrk%20if%C5%9Fa%20videolar%C4%B1\u0026cbpage=https%3A%2F%2Fturkifsaarsivivip.xyz%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1765046749651\u0026srs=c08dc72924bfc246df388b09de7014cb\u0026atv=72.1-b\u0026btp=0.01","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:50.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/suurl5.php?r=9791066\u0026cbur=0.6372627543420147\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=T%C3%BCrk%20if%C5%9Fa%20Ar%C5%9Fivi%20vip%20%E2%80%93%20En%20iyi%20T%C3%BCrk%20if%C5%9Fa%20videolar%C4%B1\u0026cbpage=https%3A%2F%2Fturkifsaarsivivip.xyz%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1765046749651\u0026srs=c08dc72924bfc246df388b09de7014cb\u0026atv=72.1-b\u0026btp=0.01 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://turkifsaarsivivip.xyz/\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Dec 2025 18:45:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3lFQ9YbBe%2BA4PhT%2B9Pl0Qo46oLkDF6%2BoafCuL872jA6inEBSnjp48TbBzpX4rVeyzR1TWUnQDq0Z5woDHavs72Pi%2FrNq%2F2pG8eb0SQd1W5P\"}]}\r\ncf-ray: 9a9df14bfdf1b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":953,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"069f3c1b8fd7af1710c2360fefd64758","sha1":"639051f31acd03ba8b07f1dd2319d90927f1a03f","sha256":"984a16d321a98def647abf063fa1643a3a86cd7f395ef724f67d3a1f9a2cedfa","sha512":"2e6f3712678afde52cd6f2b91fbcbc97be45f09e44a9e004661d832fdfdc0c7427b553203f73951a4f5e1278fd541ddeb00a6223ce08cc7a0ee44c863682bf89","ssdeep":"","tlshash":"721194132648363d8aff4aca81b37a286895fcc84e12ae98a54d4416d096dec4a6b433","first_seen":"2025-12-06T18:46:16.320483Z","last_seen":"2025-12-06T18:46:16.320483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":36,"dns":19,"connect":1,"send":0,"wait":219,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.8408924597105693\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:50.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:29:00 GMT","end":"Sat, 10 Jan 2026 13:27:25 GMT"},"fingerprint":{"sha1":"2D:85:E1:CC:5C:69:E9:00:F0:2A:D7:4D:EC:27:FD:E4:0E:99:3F:1F","sha256":"FF:B8:FC:07:03:69:0B:74:AC:FD:81:98:21:29:56:B1:D8:28:5E:79:5B:0B:DF:E3:6B:94:DB:9F:B8:AF:5B:7F"}}},"request":{"raw":"POST /ut/hb.php?cb=0.8408924597105693\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 906\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":906,"data":"{\"clientHints\":{},\"isScrollable\":1,\"totalClicks\":0,\"sessionLength\":1,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":1,\"isMouseMoved\":0,\"pagePercentageSeen\":6,\"belowTheFoldSeen\":0,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"browsingTopics\":[],\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1765046749,\"sessionId\":\"c08dc72924bfc246df388b09de7014cb\",\"timeZoneOffset\":0,\"zones\":[\"9791066\"],\"pUrl\":\"https%3A%2F%2Fturkifsaarsivivip.xyz%2F\",\"pReferrer\":\"\",\"pTitle\":\"T%C3%BCrk%20if%C5%9Fa%20Ar%C5%9Fivi%20vip%20%E2%80%93%20En%20iyi%20T%C3%BCrk%20if%C5%9Fa%20videolar%C4%B1\",\"pDescription\":\"\",\"pKeywords\":\"\",\"pHasIframes\":1,\"pWidth\":1280,\"pHeight\":19978,\"vWidth\":1280,\"vHeight\":1024,\"inIframe\":0,\"sentTimestamp\":1765046750000}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Dec 2025 18:45:50 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BUuTS02ZuFuWWayZH0DIGDEZ3D1qci0zyFtqPTY1Wy7BImSyDtKL5FMQd8NqZzziT3tS%2Fi%2BB90LXkjXx33ulqzUCuYG1Tph1ZKE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a9df14c1d5e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":47,"dns":33,"connect":1,"send":0,"wait":151,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T18:45:48.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://turkifsaarsivivip.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: max-age=600\r\nexpires: Sat, 06 Dec 2025 18:55:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 06 Dec 2025 18:45:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.167.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":163958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8933), with CRLF, LF line terminators","md5":"f49a101cd88b0d9fc10cdb316bf6ddd3","sha1":"736e4a9ec0291d6bfe35895c26dd9b4bd9f4c468","sha256":"bae4ca4e965f993843a5e4a7d64bfd1836a167425d455850ec387f5277f9989b","sha512":"31c44f371ff286b3b9fda063c9564685c4841e6308db7a6b20a4e529e9c8a1c98f2e32b8fc240599ceacb8dd7893277f3ee79802224943f1c5ba1ca159626845","ssdeep":"3072:LWk0g5zvb7G2fkMDD44OqCf2ifqippxZfrXF3ft72297CKJas9Bj+w6fV5CKT:COv9bDD44ofF5ppxZTXF3ft17CKgs90X","tlshash":"06f32af26b6c183e277e53efa425230ab1b7d53bcf45c875f1aa855a5e40ce101e360a","first_seen":"2025-12-06T18:46:16.322995Z","last_seen":"2025-12-06T18:46:16.322995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1330,"timings":{"blocked":378,"dns":183,"connect":94,"send":0,"wait":574,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/mediaelement/wp-mediaelement.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /c/6.8.3/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Jun 2019 20:45:02 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 06 Dec 2026 18:45:49 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-06-03T16:58:35.109406Z","times_seen":84204,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":42,"dns":1,"connect":9,"send":0,"wait":16,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:wght@400\u0026family=Archivo+Narrow:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Playfair+Display:wght@400\u0026family=Archivo+Narrow:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Dec 2025 18:45:49 GMT\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4308,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e607f936403e37f98d8421f34770916","sha1":"27708c081b7f5c7127f791f8999f49c588e29165","sha256":"69c34ca762cf6f0fb7dc4d8373f3d0e7fc50131db1d33a0ef3f4f39abe1baa63","sha512":"44efa5ace545997c7dacbbbfddaa30e9b00788eafab013cdbca6cc893ee3dbda0456caf86d95664d254d4e8abbf5e261126f115827bad1d8d4c423a454591d0a","ssdeep":"96:coOEabzOEabggJc+uUOEabTNDoOpabzOpabggJc+uUOpabTNMIOEau2S2UFZOjO0:cnYcUKpKxcUnKHu2S2pUu2Shu2SYVu2f","tlshash":"8e918b91146b9600a6831cc223cfbf369e5e61917885c579affe18cd9c9ec265368b0e","first_seen":"2025-09-21T22:27:59.714697Z","last_seen":"2026-05-19T02:53:16.314259Z","times_seen":8,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":224,"dns":0,"connect":23,"send":0,"wait":31,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=7.3.1","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=7.3.1 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 23 Apr 2025 01:20:51 GMT\r\netag: \"6cf-63367e971cd0b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 583\r\ncontent-type: text/css\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1743,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c45f68fb3fc3a1b08f93a0827ea4b067","sha1":"bded618d3417d75a378470e91e070ff92d6c097c","sha256":"1860b9a4475b564ae977f1a4413f7bbb668ec4a3de07a974baeaae0a6803c02d","sha512":"473c9c836e5291d2fca719e164bb6ea7d3553eb514ee3b512a1bd53b8b1246bfba980d3c4d8dd464dcec07ec806993058a1c2efa990c89d0cfa675bf1fe19c34","ssdeep":"","tlshash":"7b314d1d23c220018c3b6f65eb5646d9eb51a6b7c3a861da3c9cc2318f367d440a9f5d","first_seen":"2025-04-08T08:35:27.208962Z","last_seen":"2026-06-03T07:46:14.023165Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/js/navigation.min.js?ver=20120206","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/themes/nucleare/js/navigation.min.js?ver=20120206 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:43:20 GMT\r\netag: \"599-62e6e2d427119-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 616\r\ncontent-type: text/javascript\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1433), with no line terminators","md5":"29c6469bde88da2ce179c32f8d147242","sha1":"e92a795a7611e80d781f57cf2b3a7afea0452e2e","sha256":"fe31aca33128221bbbdac3a13c4a3aa2532cd1986b01012772f14f6883849061","sha512":"181184ec2f2169c275e0a64c55326b76a603208debdf8907c67e3f6ea6002e0900dadcb4ebe5c4e624c38440d554911090352690b73489c4229630f688a23fde","ssdeep":"","tlshash":"0621bc5e2c8427372acf25d572ef584034322095fe894812a4b0eb423978ae1197e6d8","first_seen":"2023-03-07T17:59:38Z","last_seen":"2026-06-01T00:26:42.078212Z","times_seen":40,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?v=ext\u0026blog=224068961\u0026post=0\u0026tz=3\u0026srv=turkifsaarsivivip.xyz\u0026j=1%3A14.5\u0026host=turkifsaarsivivip.xyz\u0026ref=\u0026fcp=1544\u0026rand=0.8402421599206433","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?v=ext\u0026blog=224068961\u0026post=0\u0026tz=3\u0026srv=turkifsaarsivivip.xyz\u0026j=1%3A14.5\u0026host=turkifsaarsivivip.xyz\u0026ref=\u0026fcp=1544\u0026rand=0.8402421599206433 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-06-03T16:57:04.465747Z","times_seen":103236,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-json/wordpress-popular-posts/v2/widget?is_single=0\u0026lang=0","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"POST /wp-json/wordpress-popular-posts/v2/widget?is_single=0\u0026lang=0 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://turkifsaarsivivip.xyz/\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/json\r\nX-WP-Nonce: 7382756c10\r\nContent-Length: 890\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-robots-tag: noindex\r\nlink: \u003chttps://turkifsaarsivivip.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nx-wp-nonce: 7382756c10\r\nallow: POST\r\naccess-control-allow-origin: https://turkifsaarsivivip.xyz\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin,User-Agent\r\ncache-control: max-age=172800\r\nexpires: Mon, 08 Dec 2025 18:45:49 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"84f950a2f5611b7f1cf889c24d6ae5b9","sha1":"89246655018f8611215ff65e6d3451028df67fb6","sha256":"ade9755969e5fa655ce084fb656f5b64071b8b458a995928d49b4b998cab2eea","sha512":"8e38f0fb2457f05731d6bc4be34f2789ac6165c70ba60751427bb66936635fee3473288a0d4c130e43b258672b873a025b84496d8b30db3a7240febcad4ceaa3","ssdeep":"","tlshash":"41511382a375842cdd2b03cfcab6f37d6011b4e79f74cc95b87689868981ea0c533685","first_seen":"2025-12-06T18:46:16.332008Z","last_seen":"2025-12-06T18:46:16.332008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/plugins/wordpress-popular-posts/assets/js/wpp.js?ver=7.3.1","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/plugins/wordpress-popular-posts/assets/js/wpp.js?ver=7.3.1 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 23 Apr 2025 01:20:51 GMT\r\netag: \"1584-63367e971dcac-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1701\r\ncontent-type: text/javascript\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5508,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aeffb498ee34c2b97693dd833d3ee837","sha1":"150958c84335d17d6376a12897ff9007d6fdb1bc","sha256":"1f084d11ba75148167fa296656c5e0aa2452f88a3271bbba832c5fd428e9728e","sha512":"90e3eb39aba718f53d39eb39c651429d5db2a553bff1cbe83b0d4cde26d021e51f1e9fbce5b14f197c924db832881e28f58d03d7aea8dc72a35b8812164b0065","ssdeep":"48:8NVeecZnMqIEiVAurI9pYKob+kVAIAZASjwykXyPp8PzFAYKgKyS/Q5F9JsJn/lA:9MWiWpYKob+kVsl+5eySSeCLv","tlshash":"37b1628d0923452285f3b3eb993a8658f7229137714056527e3c9b552fb3e90c4b2fce","first_seen":"2025-04-16T04:10:48.144213Z","last_seen":"2026-06-03T13:24:10.664986Z","times_seen":425,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/uploads/2025/11/Screenshot_2025-11-20-14-34-37-438_org.telegram.messenger-edit-809x1314.jpg","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Screenshot_2025-11-20-14-34-37-438_org.telegram.messenger-edit-809x1314.jpg HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 20 Nov 2025 11:36:38 GMT\r\netag: \"139f0-644051c2d6efa\"\r\naccept-ranges: bytes\r\ncontent-length: 80368\r\ncache-control: max-age=2592000\r\nexpires: Mon, 05 Jan 2026 18:45:49 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":80368,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 809x1314, components 3","md5":"a4af9aedc60280a9c669e0a29e03e76b","sha1":"17f01501b79f4dcdfbb3f1303022a7e4baf624e6","sha256":"da67ec7c8d35bf25d359dfd78c9362c41a96ceda9ad886a6ef0030fbe4ff7eb8","sha512":"b3d2ac42ced4b2fd6fb4e2c1f6ddf7c37d59b5b433beb7dd34f4dfb97260968f84dcd9151cb6fbb70e81a41be6924be8e69ef5d9ad359c76cd9e60b5a1dea7b8","ssdeep":"1536:P3zgXjyaoz0KLeAZ+0rqFGmC3MUaKkeZAdB58wpCyogh5rgLSoRnCJmIs:ApjqDqYmeMUIe8Bi+pvhRsGm9","tlshash":"f57301ad8716466ed2774d373f73c20e82ad77738908d22c60bbc0086291d52a35bfe9","first_seen":"2025-12-06T18:46:16.336426Z","last_seen":"2025-12-06T18:46:16.336426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /c/6.8.3/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 06 Dec 2026 18:45:49 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T16:55:47.31498Z","times_seen":815002,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":68,"dns":1,"connect":12,"send":0,"wait":8,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202549.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /e-202549.js HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7134-1748959715313.3396\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Mon, 30 Nov 2026 15:59:46 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3812), with no line terminators","md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-06-03T16:57:04.422047Z","times_seen":62766,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":70,"dns":4,"connect":22,"send":0,"wait":7,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 09:56:38 GMT\r\nexpires: Fri, 04 Dec 2026 09:56:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204551\r\nlast-modified: Wed, 10 Sep 2025 16:48:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21856,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21856, version 1.0","md5":"8a53e5ecdbffafb4aaa40a23fdece238","sha1":"446adba5bd78ee16c84f35e33b5ecc5c2976a0bb","sha256":"1fe9ad5d8b2ebd8ecb8fbd05bed1e3fdfa52dae3f1a04e1c219918442fe9394d","sha512":"82333082235dc518ae7e788db3ff7007f111b706586f065f38bf19340019fffba1bb2f9a88a3cfe6eb37c3ce5cada82bcf0811694cf7ebef6dfb151b1be9bf2b","ssdeep":"384:OE2iuJGj3ntoOm5d1JrjMnsuNXbxLt6/B8ZfB3Q0tlqLUIgRtBlhi6D0R7pw27:OE/uYj3ti5Fr0swLb6/eQcWUnh7uyC","tlshash":"b9a2e12544b70e10d985d5f741d29adb9430dbc81ce6af8adc14bce887356fc09adf68","first_seen":"2025-09-11T17:03:52.650693Z","last_seen":"2026-06-03T15:04:11.127376Z","times_seen":8361,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":67,"dns":6,"connect":7,"send":0,"wait":8,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turkifsaarsivivip.xyz/wp-content/themes/nucleare/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"turkifsaarsivivip.xyz","domain":"turkifsaarsivivip.xyz","tld":"xyz"},"ip":{"addr":"67.205.24.10","port":443,"asn":26347,"as":"DREAMHOST-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.turkifsaarsivivip.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 06:42:01 GMT","end":"Sun, 22 Feb 2026 06:42:00 GMT"},"fingerprint":{"sha1":"5C:1A:11:AC:65:55:A7:57:13:16:EC:41:E3:9A:3C:B8:2A:32:F8:23","sha256":"12:4D:6A:F3:10:89:B1:CC:F4:48:C6:24:97:2F:49:00:08:46:C3:9E:B8:15:D7:61:7F:DC:2E:3D:66:F8:16:A7"}}},"request":{"raw":"GET /wp-content/themes/nucleare/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: turkifsaarsivivip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/wp-content/themes/nucleare/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Feb 2025 17:43:13 GMT\r\netag: \"12d68-62e6e2cd06c7f\"\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ncache-control: max-age=172800\r\nexpires: Mon, 08 Dec 2025 18:45:49 GMT\r\nvary: User-Agent,Accept-Encoding\r\ncontent-type: font/woff2\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-03T16:55:00.805148Z","times_seen":488102,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"turkifsaarsivivip.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /c/6.8.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Sep 2020 15:53:06 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 06 Dec 2026 18:45:49 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-06-03T16:58:35.116607Z","times_seen":83226,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":3,"connect":11,"send":0,"wait":12,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AOCedOEQ9P2_zyghn4VGSd4jOVyHMODPcLCKQP1OKWH-najD3Scb3VI42Dhj0cq5lnPcuMIf\r\nx-goog-generation: 1764673785630030\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 57668\r\nx-goog-hash: crc32c=X8dAig==, md5=3sRGptrJkWM+h4sbj2RDng==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Sat, 06 Dec 2025 19:45:49 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 02 Dec 2025 11:09:45 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 696\r\ncf-cache-status: HIT\r\netag: W/\"dec446a6dac991633e878b1b8f64439e\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a9df148afcc712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57668,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57667)","md5":"dec446a6dac991633e878b1b8f64439e","sha1":"b67f76350438317b092844abb4bffa55ee5ee0f3","sha256":"10cc4a533c50a09e532fe11832ca3179f1940cb0d3055dd2fc29db8248fdd3b7","sha512":"33912a0fe548cec284af07c801eee31aaea88f5e2c118d69d1eea42def195fed46aee108253f651f47f37eeed97e35b22fe71e3218bc97b6e03d0a4fa43c4206","ssdeep":"768:h5DJGUv8El0qcctXS/OQjiS5AQ0kZG9y9Gsc6rxHzJXaFiHQotjp/8z4Do89WM41:bRXadiS5zZG9y9GFYxd5vkvcA","tlshash":"eb4376683dc01e8733458eeb7f23b5d1d554697e6585848ebe086c9432836b3faf8232","first_seen":"2025-12-02T17:30:16.50625Z","last_seen":"2025-12-09T09:59:34.360287Z","times_seen":77,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivonarrow/v35/tss0ApVBdCYD5Q7hcxTE1ArZ0bb-iXxi2g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/archivonarrow/v35/tss0ApVBdCYD5Q7hcxTE1ArZ0bb-iXxi2g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://turkifsaarsivivip.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16536\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 14:19:42 GMT\r\nexpires: Thu, 03 Dec 2026 14:19:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275167\r\nlast-modified: Wed, 10 Sep 2025 16:47:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16536, version 1.0","md5":"316b07f8c095dfdf47d49f6e20cee716","sha1":"ad58355036389f7b23e4cdac211c680a3edb4354","sha256":"2eaf4bd71b5467c7423838b3e255c3736f6af0203bb81c0ff4b655608a59c209","sha512":"a8d5002eb320afe814f9c14ceba1d2656200ce44e5641ecc155d72a5a1a38eb21f35043aeffedc45e4432e0dac1e1e74e1c1a072f74696c2c2e6ffa8388632b1","ssdeep":"384:Ewd751I7kZcO+0yTCV1BKxiLL0iYehK36urlN:dJcOFBKUn/jhc/rlN","tlshash":"5772d0ea841a43cfe14b7d39e6d0d34296a0fc7b37451a8fecd639846bf4156284a243","first_seen":"2025-07-04T23:36:38.394635Z","last_seen":"2026-05-31T11:40:06.307742Z","times_seen":57,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":64,"dns":1,"connect":20,"send":0,"wait":10,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.8.3/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turkifsaarsivivip.xyz/","date":"2025-12-06T18:45:49.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /c/6.8.3/wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turkifsaarsivivip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 06 Dec 2025 18:45:49 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 06 Dec 2026 18:45:49 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T16:55:47.362551Z","times_seen":883649,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":43,"dns":2,"connect":9,"send":0,"wait":12,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}